|
-
June 17th, 2015, 10:23 PM
#1
 [RESOLVED] Zeus or Zbot trojan...
I'm baaaack! It's cuz you're the best Broni...  It'[s been a year... and a helluva year, too.
So, Monday a.m., I opened Winpatrol to check the start up and services files and see if I needed to do any tweaking. (Annoys the h*** out of me when things sneak into startup.) I don't recall which it was in - start up or services - but shows a program Z@R6AC9.exe dated 6/13/15 and the type or the status was "hidden". I googled it and it came back as Zeus or Zbot trojan. It being 3 or 4 (or 5?) in the morning, I was going to throw MB and Eset at it. I realized I was delirious from lack of sleep and maybe that wasn't such a good idea. So, here I am.
The file it's in is C://...[User]/AppData/Local/Temp/acrord32_sbx and it's showing as a temp (TMP) file. It's never showed up in add/remove programs and it's no longer showing in Winpatrol.
Here are the results of the FRST scan (2 parts)
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Hodorowski (administrator) on DESKTOP on 17-06-2015 18:27:59
Running from C:\Users\Hodorowski\Desktop
Loaded Profiles: Hodorowski (Available Profiles: Hodorowski & Alexis & Quinn & Lexi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Backblaze\bzserv.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Zhorn Software) C:\Program Files (x86)\Stickies\stickies.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [MS Shell Services] => C:\Program Files (x86)\KidLogger\Kidlogger.exe [763568 2015-02-19] (Tesline-service)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [490176 2015-05-18] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-10-05]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk [2014-01-28]
ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2013\QBW32.EXE (Intuit Inc.)
Startup: C:\Users\Hodorowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-02-25]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Hodorowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2013-01-23]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Hodorowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk [2015-04-02]
ShortcutTarget: Stickies.lnk -> C:\Program Files (x86)\Stickies\stickies.exe (Zhorn Software)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-05-04] (Dropbox, Inc.)
GroupPolicyUsers\S-1-5-21-1650183741-4283284693-3914159089-1006\User: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1650183741-4283284693-3914159089-1005\User: Group Policy Restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir...=ie&ar=msnhome
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002 -> {5F8B03F0-96E8-41DB-8165-208DDA95E9D2} URL = https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=926458&p={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-02-14] (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-02-14] (LastPass)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-02-14] (LastPass)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-02-14] (LastPass)
Handler-x32: intu-help-qb6 - {6898B29B-BF49-43cb-A0B1-D0B9496AF491} - C:\Program Files (x86)\Intuit\QuickBooks 2013\HelpAsyncPluggableProtocol.dll [2014-01-16] (Intuit, Inc.)
Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\SysWOW64\mscoree.dll [2010-11-20] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.3.25
FireFox:
========
FF ProfilePath: C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-09] ()
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-02-14] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-02-14] (LastPass)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-05-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-05-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-05-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-05-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-05-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npMozCouponPrinter.dll [2014-10-01] (Coupons, Inc.)
FF SearchPlugin: C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\searchplugins\search.xml [2015-06-16]
FF Extension: LastPass - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\support@lastpass.com [2015-03-07]
FF Extension: WOT - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-10-04]
FF Extension: Evernote Web Clipper - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2015-02-16]
FF Extension: Add to Amazon Wish List Button - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\amznUWL2@amazon.com.xpi [2014-12-13]
FF Extension: InvisibleHand - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\canitbecheaper@trafficbroker.co.uk.xpi [2015-02-14]
FF Extension: Bluhell Firewall - C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\Extensions\{6BB5760D-F97E-421B-AF5B-8457A90C3CED}.xpi [2014-09-04]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-10-05]
FF HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR Profile: C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-06]
CHR Extension: (WOT) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-06-16]
CHR Extension: (Adblock Plus) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-10-01]
CHR Extension: (OneTab) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2015-05-08]
CHR Extension: (Add to Amazon Wish List) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2013-12-06]
CHR Extension: (Google Search) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-09]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-02-14]
CHR Extension: (Lone Tree) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfmkllfplegemejikoabfpjdaoncphip [2015-05-05]
CHR Extension: (PDF to Word Converter App) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\jclipofobaadknkadkpgggmjkebddjam [2013-10-01]
CHR Extension: (The Great Suspender) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg [2015-06-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-02-01]
CHR Extension: (Pocket) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-03-30]
CHR Extension: (Save to Pocket) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2015-05-05]
CHR Extension: (Read Your AOL Mail) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\phgdojkomekmnemlclopfjlmbamhnafp [2013-03-20]
CHR Extension: (Evernote Web Clipper) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-03-05]
CHR Extension: (Gmail) - C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-28]
CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - http://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - http://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [235712 2015-05-18] ()
S4 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [120728 2012-10-23] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S4 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]
S4 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2014-01-16] (Intuit) [File not signed]
S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [61440 2013-06-19] (Intuit Inc.) [File not signed]
S4 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2013-06-19] (Intuit Inc.) [File not signed]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1225312 2012-11-26] (Secunia)
S3 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659040 2012-11-26] (Secunia)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)
S4 lxbx_device; C:\Windows\system32\lxbxcoms.exe -service [X]
-
June 17th, 2015, 10:24 PM
#2
Part deaux
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 PCDSRVC{67F2314B-25F2B3C0-06020101}_0; \??\c:\gencotst\pcdsrvc_x64.pkms [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-17 18:27 - 2015-06-17 18:28 - 00025367 _____ C:\Users\Hodorowski\Desktop\FRST.txt
2015-06-17 18:27 - 2015-06-17 18:28 - 00000000 ____D C:\FRST
2015-06-17 18:26 - 2015-06-17 18:26 - 02109952 _____ (Farbar) C:\Users\Hodorowski\Desktop\FRST64.exe
2015-06-11 12:01 - 2015-05-25 12:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-11 12:01 - 2015-05-25 12:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-11 12:01 - 2015-05-25 12:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-11 12:01 - 2015-05-25 12:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-11 12:01 - 2015-05-25 12:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-11 12:01 - 2015-05-25 12:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-11 12:01 - 2015-05-25 12:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-11 12:01 - 2015-05-25 12:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-11 12:01 - 2015-05-25 12:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-11 12:01 - 2015-05-25 12:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-11 12:01 - 2015-05-25 12:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-11 12:01 - 2015-05-25 12:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 12:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-11 12:01 - 2015-05-25 12:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-11 12:01 - 2015-05-25 12:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-11 12:01 - 2015-05-25 12:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-11 12:01 - 2015-05-25 12:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-11 12:01 - 2015-05-25 12:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-11 12:01 - 2015-05-25 11:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-11 12:01 - 2015-05-25 11:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-11 12:01 - 2015-05-25 11:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-11 12:01 - 2015-05-25 11:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-11 12:01 - 2015-05-25 11:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-11 12:01 - 2015-05-25 11:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 11:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 12:01 - 2015-05-25 10:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-11 12:01 - 2015-05-25 10:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-11 12:01 - 2015-05-25 10:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 10:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 10:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 12:01 - 2015-05-25 10:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-11 12:01 - 2015-04-29 12:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 12:01 - 2015-04-29 12:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 12:01 - 2015-04-29 12:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 12:01 - 2015-04-29 12:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 12:01 - 2015-04-29 12:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-11 12:01 - 2015-04-29 12:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-11 12:01 - 2015-04-29 12:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-11 12:01 - 2015-04-29 12:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-11 12:01 - 2015-04-29 12:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-11 12:01 - 2015-04-29 12:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-11 12:00 - 2015-06-01 12:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-11 12:00 - 2015-05-27 08:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-11 12:00 - 2015-05-25 11:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 12:00 - 2015-05-22 21:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-11 12:00 - 2015-05-22 21:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-11 12:00 - 2015-05-22 21:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-11 12:00 - 2015-05-22 21:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-11 12:00 - 2015-05-22 20:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-11 12:00 - 2015-05-22 20:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-11 12:00 - 2015-05-22 20:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-11 12:00 - 2015-05-22 20:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-11 12:00 - 2015-05-22 20:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-11 12:00 - 2015-05-22 13:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-11 12:00 - 2015-05-22 12:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-11 12:00 - 2015-05-22 12:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-11 12:00 - 2015-05-22 12:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-11 12:00 - 2015-05-22 12:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-11 12:00 - 2015-04-24 12:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 12:00 - 2015-04-24 11:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-11 12:00 - 2015-04-10 21:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-11 11:59 - 2015-06-01 13:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-11 11:59 - 2015-05-27 08:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-11 11:59 - 2015-05-22 21:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-11 11:59 - 2015-05-22 21:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-11 11:59 - 2015-05-22 21:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-11 11:59 - 2015-05-22 21:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-11 11:59 - 2015-05-22 21:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-11 11:59 - 2015-05-22 21:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-11 11:59 - 2015-05-22 21:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-11 11:59 - 2015-05-22 21:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-11 11:59 - 2015-05-22 21:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-11 11:59 - 2015-05-22 20:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-11 11:59 - 2015-05-22 20:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-11 11:59 - 2015-05-22 20:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-11 11:59 - 2015-05-22 20:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-11 11:59 - 2015-05-22 20:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-11 11:59 - 2015-05-22 20:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-11 11:59 - 2015-05-22 20:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-11 11:59 - 2015-05-22 20:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-11 11:59 - 2015-05-22 13:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-11 11:59 - 2015-05-22 13:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-11 11:59 - 2015-05-22 13:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-11 11:59 - 2015-05-22 13:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-11 11:59 - 2015-05-22 13:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-11 11:59 - 2015-05-22 13:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-11 11:59 - 2015-05-22 12:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-11 11:59 - 2015-05-22 12:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-11 11:59 - 2015-05-22 12:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-11 11:59 - 2015-05-22 12:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-11 11:59 - 2015-05-22 12:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-11 11:59 - 2015-05-22 12:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-11 11:59 - 2015-05-22 12:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-11 11:59 - 2015-05-22 12:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-11 11:59 - 2015-05-22 12:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-11 11:59 - 2015-05-22 12:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-11 11:59 - 2015-05-22 12:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-11 11:59 - 2015-05-22 12:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-11 11:59 - 2015-05-22 12:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-11 11:59 - 2015-05-22 12:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-11 11:59 - 2015-05-22 12:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-11 11:59 - 2015-05-22 11:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-11 11:59 - 2015-05-22 11:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-11 11:59 - 2015-05-22 11:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-11 11:59 - 2015-05-22 11:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 00:33 - 2015-06-10 00:33 - 00000000 ____D C:\Users\Hodorowski\Documents\PassMark
2015-06-10 00:33 - 2015-06-10 00:33 - 00000000 ____D C:\Users\Hodorowski\AppData\Local\PassMark
2015-06-10 00:33 - 2015-06-10 00:33 - 00000000 ____D C:\ProgramData\Passmark
2015-06-10 00:33 - 2015-06-10 00:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PerformanceTest (64-bit)
2015-06-10 00:33 - 2015-06-10 00:33 - 00000000 ____D C:\Program Files\PerformanceTest
2015-06-10 00:33 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-06-10 00:33 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-06-10 00:33 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-06-10 00:33 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-06-10 00:16 - 2015-06-10 00:18 - 10643232 _____ (Passmark Software ) C:\Users\Hodorowski\Downloads\petst7_x64.exe
2015-06-09 14:35 - 2015-06-09 14:42 - 00000000 ____D C:\Users\Hodorowski\Documents\New folder
2015-06-09 14:35 - 2015-06-09 14:35 - 00000000 ____D C:\Users\Hodorowski\Documents\New folder (2)
2015-06-05 10:59 - 2015-05-22 12:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-05 10:59 - 2015-05-22 12:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-05 10:59 - 2015-05-22 12:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-05 10:59 - 2015-05-22 12:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-05 10:59 - 2015-05-22 12:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-05 10:59 - 2015-05-22 12:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-05 10:59 - 2015-05-22 12:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-05 10:59 - 2015-05-21 07:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-04 21:14 - 2015-06-04 21:14 - 00000000 ____D C:\Users\Alexis & Quinn\AppData\Local\GWX
2015-06-04 10:51 - 2015-06-04 10:51 - 00000000 ____D C:\Users\Hodorowski\AppData\Local\GWX
2015-06-02 09:11 - 2015-06-11 11:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-05-26 10:36 - 2015-06-16 06:40 - 00000000 ___RD C:\Users\Hodorowski\Dropbox
2015-05-26 10:35 - 2015-05-26 10:35 - 00000000 ____D C:\Users\Hodorowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-05-26 10:32 - 2015-06-16 06:39 - 00000000 ____D C:\Users\Hodorowski\AppData\Roaming\Dropbox
2015-05-26 10:31 - 2015-05-26 10:31 - 00356272 _____ (Dropbox, Inc.) C:\Users\Hodorowski\Downloads\DropboxInstaller.exe
2015-05-22 01:43 - 2015-05-22 01:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-05-22 01:41 - 2015-05-22 01:42 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-05-22 01:41 - 2015-05-22 01:42 - 00000000 ____D C:\Program Files\iTunes
2015-05-22 01:41 - 2015-05-22 01:41 - 00000000 ____D C:\Program Files\iPod
2015-05-22 01:41 - 2015-05-22 01:41 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-05-22 01:39 - 2015-05-22 01:41 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-05-22 01:39 - 2015-05-22 01:39 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-05-22 01:39 - 2015-05-22 01:39 - 00000000 ____D C:\Program Files\Bonjour
2015-05-22 01:39 - 2015-05-22 01:39 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-05-22 01:39 - 2015-05-22 01:39 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-05-22 01:28 - 2015-05-22 01:35 - 152362800 _____ (Apple Inc.) C:\Users\Hodorowski\Downloads\iTunes6464Setup.exe
2015-05-22 00:24 - 2015-05-22 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-05-22 00:23 - 2015-05-22 00:24 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-05-18 00:11 - 2015-05-18 00:11 - 01536072 _____ (Tesline-service ) C:\Users\Hodorowski\Downloads\monitoring_agent.exe
-
June 17th, 2015, 10:36 PM
#3
Hmmmm, screwed that up when I split the file. Sorry about that. Hope I got it all to you in the right order.
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-17 18:18 - 2015-05-01 03:31 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-17 17:45 - 2013-03-03 21:40 - 00000964 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA.job
2015-06-17 17:37 - 2012-08-08 17:03 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-17 11:17 - 2011-09-19 13:48 - 01325936 _____ C:\Windows\WindowsUpdate.log
2015-06-17 11:00 - 2009-07-13 22:45 - 00028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-17 11:00 - 2009-07-13 22:45 - 00028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-17 05:36 - 2012-08-08 17:03 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-17 00:59 - 2015-04-02 22:41 - 00000000 ____D C:\Users\Hodorowski\AppData\Roaming\stickies
2015-06-17 00:54 - 2011-11-07 17:44 - 00000000 ____D C:\Users\Hodorowski\Documents\misc
2015-06-17 00:46 - 2014-01-28 11:34 - 00000000 ___RD C:\Users\Hodorowski\Desktop\Tools
2015-06-16 23:34 - 2012-09-18 17:48 - 00000000 ____D C:\Users\Hodorowski\Documents\Alexis
2015-06-16 20:45 - 2013-03-03 21:40 - 00000942 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core.job
2015-06-15 22:13 - 2015-04-17 12:27 - 00087552 _____ C:\Users\Hodorowski\Desktop\passwords_all_6-27-14 (Autosaved).xlsx
2015-06-12 09:15 - 2011-11-23 21:28 - 00000632 __RSH C:\Users\Hodorowski\ntuser.pol
2015-06-12 09:15 - 2011-11-06 15:49 - 00000000 ____D C:\Users\Hodorowski
2015-06-12 09:15 - 2009-07-13 23:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-12 05:47 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\rescache
2015-06-12 05:05 - 2009-07-13 23:13 - 00783464 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-12 04:58 - 2009-07-13 23:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-12 04:58 - 2009-07-13 22:45 - 00514176 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 04:57 - 2010-11-20 21:47 - 00662042 _____ C:\Windows\PFRO.log
2015-06-12 04:57 - 2009-07-13 22:51 - 00084408 _____ C:\Windows\setupact.log
2015-06-12 04:54 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 03:47 - 2011-11-07 13:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-12 03:20 - 2013-08-08 03:05 - 00000000 ____D C:\Windows\system32\MRT
2015-06-12 03:06 - 2011-11-06 16:46 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 11:13 - 2012-05-01 14:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-10 00:33 - 2011-09-19 14:07 - 00238339 _____ C:\Windows\DirectX.log
2015-06-10 00:21 - 2011-11-07 18:05 - 00000000 ____D C:\Users\Hodorowski\Documents\Bonnie
2015-06-09 23:13 - 2012-04-13 16:03 - 00000000 ____D C:\Users\Hodorowski\Documents\Sarah
2015-06-09 16:18 - 2015-05-01 03:31 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-09 16:18 - 2013-01-05 21:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-09 16:18 - 2011-11-06 16:04 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-09 03:10 - 2015-02-17 18:21 - 00000000 ____D C:\Users\Hodorowski\Documents\Quinn
2015-06-07 17:35 - 2015-04-28 16:33 - 00000000 ____D C:\Users\Hodorowski\Documents\Benefits
2015-06-07 17:24 - 2013-12-06 17:29 - 00000000 ____D C:\Users\Hodorowski\Documents\Health Coverage Medicaid CICP
2015-06-07 14:54 - 2012-09-07 17:20 - 00000000 ____D C:\Users\Hodorowski\Documents\S Room
2015-06-06 03:18 - 2014-12-11 04:39 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-06 03:18 - 2014-05-06 03:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-04 21:13 - 2011-11-24 09:46 - 00001250 __RSH C:\Users\Alexis & Quinn\ntuser.pol
2015-06-04 21:13 - 2011-11-24 09:46 - 00000000 ____D C:\Users\Alexis & Quinn
2015-05-31 05:18 - 2014-03-06 22:24 - 00007609 _____ C:\Users\Hodorowski\AppData\Local\Resmon.ResmonCfg
2015-05-30 20:52 - 2014-10-25 13:17 - 00000000 ____D C:\Users\Hodorowski\Documents\Verizon
2015-05-29 13:24 - 2013-08-04 20:41 - 01041158 __RSH C:\Users\Lexi\ntuser.pol
2015-05-29 13:24 - 2013-08-04 20:41 - 00000000 ____D C:\Users\Lexi
2015-05-29 04:58 - 2014-01-18 17:43 - 00000000 ____D C:\Users\Public\Documents\Misc
2015-05-29 04:47 - 2012-08-08 17:03 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-29 04:40 - 2015-01-29 09:45 - 00000000 ___RD C:\Users\Hodorowski\Google Drive
2015-05-24 21:50 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-24 12:08 - 2014-08-16 19:15 - 00000242 _____ C:\Users\Alexis & Quinn\BullseyeCoverageError.txt
2015-05-22 01:38 - 2011-11-18 00:27 - 00000000 ____D C:\ProgramData\Apple
2015-05-22 00:33 - 2014-11-11 20:49 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-05-20 03:01 - 2015-04-05 03:01 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 03:01 - 2015-04-05 03:01 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-18 20:12 - 2015-04-01 21:36 - 00000000 ____D C:\Program Files (x86)\KidLogger
2015-05-18 16:33 - 2014-03-06 22:03 - 00000000 ____D C:\Program Files (x86)\Backblaze
2015-05-18 13:03 - 2011-11-07 18:05 - 00000000 ____D C:\Users\Hodorowski\Documents\Mike
==================== Files in the root of some directories =======
2015-02-14 05:26 - 2015-02-14 05:26 - 14190648 _____ () C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-02-04 22:02 - 2015-04-03 15:28 - 0009728 ___SH () C:\Users\Hodorowski\AppData\Roaming\Thumbs.db
2013-06-30 12:28 - 2013-06-30 12:28 - 0005003 _____ () C:\Users\Hodorowski\AppData\Roaming\UserTile.png
2011-11-17 23:21 - 2015-04-03 17:02 - 0003584 _____ () C:\Users\Hodorowski\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-06 22:24 - 2015-05-31 05:18 - 0007609 _____ () C:\Users\Hodorowski\AppData\Local\Resmon.ResmonCfg
2013-06-30 16:46 - 2013-06-30 16:46 - 0000000 _____ () C:\Users\Hodorowski\AppData\Local\rx_image32.Cache
2011-11-06 17:06 - 2014-10-05 17:05 - 0047125 _____ () C:\ProgramData\hpzinstall.log
2014-03-06 22:24 - 2015-02-25 18:23 - 0000614 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2013-10-17 13:57 - 2013-10-17 13:57 - 1526447 _____ () C:\ProgramData\SPL8DB9.tmp
2013-10-20 18:04 - 2013-10-20 18:04 - 5291507 _____ () C:\ProgramData\SPLF2C1.tmp
2013-10-22 23:15 - 2013-10-22 23:15 - 5291507 _____ () C:\ProgramData\SPLF9.tmp
Some files in TEMP:
====================
C:\Users\Alexis & Quinn\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\Hodorowski\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp36dmef.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-13 00:13
==================== End of log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Hodorowski at 2015-06-17 18:28:52
Running from C:\Users\Hodorowski\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1650183741-4283284693-3914159089-500 - Administrator - Disabled)
Alexis & Quinn (S-1-5-21-1650183741-4283284693-3914159089-1005 - Limited - Enabled) => C:\Users\Alexis & Quinn
Guest (S-1-5-21-1650183741-4283284693-3914159089-501 - Limited - Disabled)
Hodorowski (S-1-5-21-1650183741-4283284693-3914159089-1002 - Administrator - Enabled) => C:\Users\Hodorowski
HomeGroupUser$ (S-1-5-21-1650183741-4283284693-3914159089-1004 - Limited - Enabled)
Lexi (S-1-5-21-1650183741-4283284693-3914159089-1006 - Limited - Enabled) => C:\Users\Lexi
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
6500_E709_eDocs (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avery Wizard 5.0 (HKLM-x32\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery)
Backblaze (HKLM-x32\...\Backblaze) (Version: - Backblaze, Inc)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Bullzip PDF Printer 10.12.0.2361 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.12.0.2361 - Bullzip)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.4.0 - Conexant)
CyberLink PowerDVD 9.5 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.5.1.3426 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.28 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DocMgr (x32 Version: 140.0.65.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
Facebook Messenger 2.1.4814.0 (HKLM-x32\...\{7204BDEE-1A48-4D95-A964-44A9250B439E}) (Version: 2.1.4814.0 - Facebook)
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
ffdshow [rev 2527] [2008-12-19] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google SketchUp 8 (HKLM-x32\...\{3544DED1-07DB-40C0-98F3-435A6DA195C7}) (Version: 3.0.14346 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hoyle Puzzle & Board Games 2010 (remove only) (HKLM-x32\...\Hoyle Puzzle & Board Games 2010) (Version: - )
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 6500 E709 Series (HKLM\...\{58D79E62-CFC8-4331-8469-3A1B16E1769C}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.670 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KidLogger Monitoring Agent 5.9 (HKLM-x32\...\Monitoring Agent_is1) (Version: - Tesline-service)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MGTEK dopisp 6.1 (HKLM-x32\...\{C25D3574-3136-4B33-9D32-8F0F5E81F349}) (Version: 6.1.3574 - MGTEK)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Ultimate 2007 (HKLM-x32\...\ULTIMATER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.3.4 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 12.10.3002 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 5.9.0 (Version: 5.9.0 - Motorola Inc.) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security)
PerformanceTest v7.0 (64-bit) (HKLM\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
QuickBooks (x32 Version: 23.0.4012.2305 - Intuit Inc.) Hidden
QuickBooks Premier: Accountant Edition 2013 (HKLM-x32\...\{36B3E6E3-D4DE-4B89-A9E6-727715C2A318}) (Version: 23.0.4008.2305 - Intuit Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
Secunia PSI (3.0.0.6001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6001 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Stickies 8.0c (HKLM-x32\...\ZhornStickies) (Version: - Zhorn Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
TaxACT 2012 - 1040 Edition (HKLM-x32\...\TaxACT 2012 - 1040 Edition) (Version: - 2nd Story Software, Inc.)
TaxACT 2012 Colorado (HKLM-x32\...\TaxACT 2012 Colorado) (Version: - 2nd Story Software, Inc.)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinPatrol (HKLM\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 32.0.2014.5 - Ruiware)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 20:34 - 2011-12-11 17:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {050A09BC-134A-4AEB-B37D-55CC92C67CBC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {06472A68-D05C-4DD8-BB94-A94EA4D52707} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {095D4B3D-D1AF-40AD-BF7A-C430987A0A81} - System32\Tasks\{834910FF-020A-4251-A05C-5C76592661EF} => pcalua.exe -a C:\Users\Hodorowski\Downloads\iview438_setup.exe -d C:\Users\Hodorowski\Downloads
Task: {13B19D63-78AD-4DF3-8F2C-48B087EF0464} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {14601699-53E2-458D-97D7-AD4A8876E7B4} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {14EF7B21-27D2-4398-9F5A-2CB96C2F4A0F} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-06] (Microsoft Corporation)
Task: {1D13C1AB-D200-4710-97D7-8DFFB3D2F00D} - System32\Tasks\{93222A76-1EF2-44F2-8CE3-AED32A2AAAE1} => C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_9edcb4a706944d0a\convert.exe [2009-07-13] (Microsoft Corporation)
Task: {2CF0A994-B8EA-4803-AB87-9311472E1C90} - System32\Tasks\{64F84762-C67F-4186-97EB-588A5B108C45} => pcalua.exe -a C:\Users\Hodorowski\Downloads\OJ6500vE709_Scrubber_12.exe -d C:\Users\Hodorowski\Downloads
Task: {402705C9-1051-412B-8DDA-FB26269714AA} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {44202A76-619E-4DAD-B91E-62DC08BACDCC} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)
Task: {504EBFC0-399F-47F9-913F-7E1BCB7A026D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-09] (Adobe Systems Incorporated)
Task: {55A887DB-1575-421F-8E77-E4D29A6AD5B2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {6A480D9D-8D64-4534-9E8A-1E631C08394F} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {75AD12B3-25FD-494E-9709-641AAE83C2D2} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {7E36503B-8887-41E9-8263-F5553760E345} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {7FE3AEFF-9819-43A7-A17C-27F9EB4E4DFD} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation)
Task: {858C3320-30F1-4598-85F5-D2F245FB9849} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {9B5F5ADF-46C6-407B-898A-3E18A968DA91} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {9FA78481-71C5-4BF3-82C9-6C53966949C9} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {C45B6FDF-AA9C-4975-8BF1-FEDEAB97E040} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-03] (Facebook Inc.)
Task: {CA2D9F55-3C65-4F58-B87C-9648F9E32EFC} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {D3A2D2A9-FFA9-4C6E-B544-965C6C9DA8A8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-03] (Facebook Inc.)
Task: {FE13B76F-7CA0-4AAF-8FA8-2A1221BE66D7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core.job => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA.job => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-06 22:03 - 2015-05-18 16:32 - 00235712 _____ () C:\Program Files (x86)\Backblaze\bzserv.exe
2015-01-29 19:57 - 2015-01-29 19:57 - 00439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2015-01-29 19:57 - 2015-01-29 19:57 - 00321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2015-06-09 19:40 - 2015-06-05 12:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-09 19:40 - 2015-06-05 12:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
-
June 17th, 2015, 10:42 PM
#4
Hmm, I think I screwed up splitting the file to make the max 50000 characters. Then it kicked me off the page. Hope this works and is in the right order. (damn distracting teenagers)
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-17 18:18 - 2015-05-01 03:31 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-17 17:45 - 2013-03-03 21:40 - 00000964 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA.job
2015-06-17 17:37 - 2012-08-08 17:03 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-17 11:17 - 2011-09-19 13:48 - 01325936 _____ C:\Windows\WindowsUpdate.log
2015-06-17 11:00 - 2009-07-13 22:45 - 00028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-17 11:00 - 2009-07-13 22:45 - 00028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-17 05:36 - 2012-08-08 17:03 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-17 00:59 - 2015-04-02 22:41 - 00000000 ____D C:\Users\Hodorowski\AppData\Roaming\stickies
2015-06-17 00:54 - 2011-11-07 17:44 - 00000000 ____D C:\Users\Hodorowski\Documents\misc
2015-06-17 00:46 - 2014-01-28 11:34 - 00000000 ___RD C:\Users\Hodorowski\Desktop\Tools
2015-06-16 23:34 - 2012-09-18 17:48 - 00000000 ____D C:\Users\Hodorowski\Documents\Alexis
2015-06-16 20:45 - 2013-03-03 21:40 - 00000942 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core.job
2015-06-15 22:13 - 2015-04-17 12:27 - 00087552 _____ C:\Users\Hodorowski\Desktop\passwords_all_6-27-14 (Autosaved).xlsx
2015-06-12 09:15 - 2011-11-23 21:28 - 00000632 __RSH C:\Users\Hodorowski\ntuser.pol
2015-06-12 09:15 - 2011-11-06 15:49 - 00000000 ____D C:\Users\Hodorowski
2015-06-12 09:15 - 2009-07-13 23:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-12 05:47 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\rescache
2015-06-12 05:05 - 2009-07-13 23:13 - 00783464 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-12 04:58 - 2009-07-13 23:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-12 04:58 - 2009-07-13 22:45 - 00514176 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 04:57 - 2010-11-20 21:47 - 00662042 _____ C:\Windows\PFRO.log
2015-06-12 04:57 - 2009-07-13 22:51 - 00084408 _____ C:\Windows\setupact.log
2015-06-12 04:54 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 03:47 - 2011-11-07 13:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-12 03:20 - 2013-08-08 03:05 - 00000000 ____D C:\Windows\system32\MRT
2015-06-12 03:06 - 2011-11-06 16:46 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 11:13 - 2012-05-01 14:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-10 00:33 - 2011-09-19 14:07 - 00238339 _____ C:\Windows\DirectX.log
2015-06-10 00:21 - 2011-11-07 18:05 - 00000000 ____D C:\Users\Hodorowski\Documents\Bonnie
2015-06-09 23:13 - 2012-04-13 16:03 - 00000000 ____D C:\Users\Hodorowski\Documents\Sarah
2015-06-09 16:18 - 2015-05-01 03:31 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-09 16:18 - 2013-01-05 21:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-09 16:18 - 2011-11-06 16:04 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-09 03:10 - 2015-02-17 18:21 - 00000000 ____D C:\Users\Hodorowski\Documents\Quinn
2015-06-07 17:35 - 2015-04-28 16:33 - 00000000 ____D C:\Users\Hodorowski\Documents\Benefits
2015-06-07 17:24 - 2013-12-06 17:29 - 00000000 ____D C:\Users\Hodorowski\Documents\Health Coverage Medicaid CICP
2015-06-07 14:54 - 2012-09-07 17:20 - 00000000 ____D C:\Users\Hodorowski\Documents\S Room
2015-06-06 03:18 - 2014-12-11 04:39 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-06 03:18 - 2014-05-06 03:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-04 21:13 - 2011-11-24 09:46 - 00001250 __RSH C:\Users\Alexis & Quinn\ntuser.pol
2015-06-04 21:13 - 2011-11-24 09:46 - 00000000 ____D C:\Users\Alexis & Quinn
2015-05-31 05:18 - 2014-03-06 22:24 - 00007609 _____ C:\Users\Hodorowski\AppData\Local\Resmon.ResmonCfg
2015-05-30 20:52 - 2014-10-25 13:17 - 00000000 ____D C:\Users\Hodorowski\Documents\Verizon
2015-05-29 13:24 - 2013-08-04 20:41 - 01041158 __RSH C:\Users\Lexi\ntuser.pol
2015-05-29 13:24 - 2013-08-04 20:41 - 00000000 ____D C:\Users\Lexi
2015-05-29 04:58 - 2014-01-18 17:43 - 00000000 ____D C:\Users\Public\Documents\Misc
2015-05-29 04:47 - 2012-08-08 17:03 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-29 04:40 - 2015-01-29 09:45 - 00000000 ___RD C:\Users\Hodorowski\Google Drive
2015-05-24 21:50 - 2009-07-13 21:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-24 12:08 - 2014-08-16 19:15 - 00000242 _____ C:\Users\Alexis & Quinn\BullseyeCoverageError.txt
2015-05-22 01:38 - 2011-11-18 00:27 - 00000000 ____D C:\ProgramData\Apple
2015-05-22 00:33 - 2014-11-11 20:49 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-05-20 03:01 - 2015-04-05 03:01 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 03:01 - 2015-04-05 03:01 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-18 20:12 - 2015-04-01 21:36 - 00000000 ____D C:\Program Files (x86)\KidLogger
2015-05-18 16:33 - 2014-03-06 22:03 - 00000000 ____D C:\Program Files (x86)\Backblaze
2015-05-18 13:03 - 2011-11-07 18:05 - 00000000 ____D C:\Users\Hodorowski\Documents\Mike
==================== Files in the root of some directories =======
2015-02-14 05:26 - 2015-02-14 05:26 - 14190648 _____ () C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-02-04 22:02 - 2015-04-03 15:28 - 0009728 ___SH () C:\Users\Hodorowski\AppData\Roaming\Thumbs.db
2013-06-30 12:28 - 2013-06-30 12:28 - 0005003 _____ () C:\Users\Hodorowski\AppData\Roaming\UserTile.png
2011-11-17 23:21 - 2015-04-03 17:02 - 0003584 _____ () C:\Users\Hodorowski\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-06 22:24 - 2015-05-31 05:18 - 0007609 _____ () C:\Users\Hodorowski\AppData\Local\Resmon.ResmonCfg
2013-06-30 16:46 - 2013-06-30 16:46 - 0000000 _____ () C:\Users\Hodorowski\AppData\Local\rx_image32.Cache
2011-11-06 17:06 - 2014-10-05 17:05 - 0047125 _____ () C:\ProgramData\hpzinstall.log
2014-03-06 22:24 - 2015-02-25 18:23 - 0000614 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2013-10-17 13:57 - 2013-10-17 13:57 - 1526447 _____ () C:\ProgramData\SPL8DB9.tmp
2013-10-20 18:04 - 2013-10-20 18:04 - 5291507 _____ () C:\ProgramData\SPLF2C1.tmp
2013-10-22 23:15 - 2013-10-22 23:15 - 5291507 _____ () C:\ProgramData\SPLF9.tmp
Some files in TEMP:
====================
C:\Users\Alexis & Quinn\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\Hodorowski\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp36dmef.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-13 00:13
==================== End of log ============================
-
June 17th, 2015, 10:44 PM
#5
Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Hodorowski at 2015-06-17 18:28:52
Running from C:\Users\Hodorowski\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1650183741-4283284693-3914159089-500 - Administrator - Disabled)
Alexis & Quinn (S-1-5-21-1650183741-4283284693-3914159089-1005 - Limited - Enabled) => C:\Users\Alexis & Quinn
Guest (S-1-5-21-1650183741-4283284693-3914159089-501 - Limited - Disabled)
Hodorowski (S-1-5-21-1650183741-4283284693-3914159089-1002 - Administrator - Enabled) => C:\Users\Hodorowski
HomeGroupUser$ (S-1-5-21-1650183741-4283284693-3914159089-1004 - Limited - Enabled)
Lexi (S-1-5-21-1650183741-4283284693-3914159089-1006 - Limited - Enabled) => C:\Users\Lexi
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
6500_E709_eDocs (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avery Wizard 5.0 (HKLM-x32\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery)
Backblaze (HKLM-x32\...\Backblaze) (Version: - Backblaze, Inc)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Bullzip PDF Printer 10.12.0.2361 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.12.0.2361 - Bullzip)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.4.0 - Conexant)
CyberLink PowerDVD 9.5 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.5.1.3426 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows 1.28 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DocMgr (x32 Version: 140.0.65.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
Facebook Messenger 2.1.4814.0 (HKLM-x32\...\{7204BDEE-1A48-4D95-A964-44A9250B439E}) (Version: 2.1.4814.0 - Facebook)
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
ffdshow [rev 2527] [2008-12-19] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google SketchUp 8 (HKLM-x32\...\{3544DED1-07DB-40C0-98F3-435A6DA195C7}) (Version: 3.0.14346 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hoyle Puzzle & Board Games 2010 (remove only) (HKLM-x32\...\Hoyle Puzzle & Board Games 2010) (Version: - )
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 6500 E709 Series (HKLM\...\{58D79E62-CFC8-4331-8469-3A1B16E1769C}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.002 - Hewlett-Packard)
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.670 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KidLogger Monitoring Agent 5.9 (HKLM-x32\...\Monitoring Agent_is1) (Version: - Tesline-service)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MGTEK dopisp 6.1 (HKLM-x32\...\{C25D3574-3136-4B33-9D32-8F0F5E81F349}) (Version: 6.1.3574 - MGTEK)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Ultimate 2007 (HKLM-x32\...\ULTIMATER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.3.4 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 12.10.3002 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 5.9.0 (Version: 5.9.0 - Motorola Inc.) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security)
PerformanceTest v7.0 (64-bit) (HKLM\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
QuickBooks (x32 Version: 23.0.4012.2305 - Intuit Inc.) Hidden
QuickBooks Premier: Accountant Edition 2013 (HKLM-x32\...\{36B3E6E3-D4DE-4B89-A9E6-727715C2A318}) (Version: 23.0.4008.2305 - Intuit Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
Secunia PSI (3.0.0.6001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.6001 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Stickies 8.0c (HKLM-x32\...\ZhornStickies) (Version: - Zhorn Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
TaxACT 2012 - 1040 Edition (HKLM-x32\...\TaxACT 2012 - 1040 Edition) (Version: - 2nd Story Software, Inc.)
TaxACT 2012 Colorado (HKLM-x32\...\TaxACT 2012 Colorado) (Version: - 2nd Story Software, Inc.)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinPatrol (HKLM\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 32.0.2014.5 - Ruiware)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1650183741-4283284693-3914159089-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 20:34 - 2011-12-11 17:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {050A09BC-134A-4AEB-B37D-55CC92C67CBC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {06472A68-D05C-4DD8-BB94-A94EA4D52707} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {095D4B3D-D1AF-40AD-BF7A-C430987A0A81} - System32\Tasks\{834910FF-020A-4251-A05C-5C76592661EF} => pcalua.exe -a C:\Users\Hodorowski\Downloads\iview438_setup.exe -d C:\Users\Hodorowski\Downloads
Task: {13B19D63-78AD-4DF3-8F2C-48B087EF0464} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {14601699-53E2-458D-97D7-AD4A8876E7B4} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {14EF7B21-27D2-4398-9F5A-2CB96C2F4A0F} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-06] (Microsoft Corporation)
Task: {1D13C1AB-D200-4710-97D7-8DFFB3D2F00D} - System32\Tasks\{93222A76-1EF2-44F2-8CE3-AED32A2AAAE1} => C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_9edcb4a706944d0a\convert.exe [2009-07-13] (Microsoft Corporation)
Task: {2CF0A994-B8EA-4803-AB87-9311472E1C90} - System32\Tasks\{64F84762-C67F-4186-97EB-588A5B108C45} => pcalua.exe -a C:\Users\Hodorowski\Downloads\OJ6500vE709_Scrubber_12.exe -d C:\Users\Hodorowski\Downloads
Task: {402705C9-1051-412B-8DDA-FB26269714AA} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {44202A76-619E-4DAD-B91E-62DC08BACDCC} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)
Task: {504EBFC0-399F-47F9-913F-7E1BCB7A026D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-09] (Adobe Systems Incorporated)
Task: {55A887DB-1575-421F-8E77-E4D29A6AD5B2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {6A480D9D-8D64-4534-9E8A-1E631C08394F} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {75AD12B3-25FD-494E-9709-641AAE83C2D2} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {7E36503B-8887-41E9-8263-F5553760E345} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {7FE3AEFF-9819-43A7-A17C-27F9EB4E4DFD} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation)
Task: {858C3320-30F1-4598-85F5-D2F245FB9849} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {9B5F5ADF-46C6-407B-898A-3E18A968DA91} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {9FA78481-71C5-4BF3-82C9-6C53966949C9} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2012-10-23] ()
Task: {C45B6FDF-AA9C-4975-8BF1-FEDEAB97E040} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-03] (Facebook Inc.)
Task: {CA2D9F55-3C65-4F58-B87C-9648F9E32EFC} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {D3A2D2A9-FFA9-4C6E-B544-965C6C9DA8A8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-03] (Facebook Inc.)
Task: {FE13B76F-7CA0-4AAF-8FA8-2A1221BE66D7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core.job => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA.job => C:\Users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-06 22:03 - 2015-05-18 16:32 - 00235712 _____ () C:\Program Files (x86)\Backblaze\bzserv.exe
2015-01-29 19:57 - 2015-01-29 19:57 - 00439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2015-01-29 19:57 - 2015-01-29 19:57 - 00321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2015-06-09 19:40 - 2015-06-05 12:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-09 19:40 - 2015-06-05 12:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Hodorowski\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 205.171.3.25
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: RoxMediaDB12OEM => 3
MSCONFIG\Services: RoxWatch12 => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Desktop Disc Tool => "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{14D6B900-DF08-4C03-89F7-E5B141A3C797}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{93DBFBAB-A21E-43FE-89CF-82B848A8AB58}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{01E147B9-0456-4DF5-9A9E-239D474E86BC}] => (Allow) svchost.exe
FirewallRules: [{F2865BF7-335E-4B51-8D4E-D3F7EB27B281}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{07F2CF0E-3D33-4DCE-9FEF-23C16E0D6E27}] => (Allow) E:\setup\hpznui40.exe
FirewallRules: [{E32149B7-3563-4595-A1DA-9AA2D600CC57}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{F7FD3FD2-0369-4C9F-853E-CAA9C4308C38}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{ABC6A73C-E213-4559-9234-47205CF7AE6A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{57A2688B-781C-4A4A-A6B5-7704E98276EA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{73C33E61-B938-452F-A8AE-452E10DC36E7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{EF9E50DA-BD95-49AA-A8CC-054D89E5012E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{F314F29F-B8A7-46D4-97FC-6ACE814C7D5F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{26E5CC2E-74BF-4929-A864-42A9FE2DA583}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{C4D853C0-EC4E-4525-8740-C4898EB7CC77}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{4DCA0EC0-D772-4877-A1B0-291879ECAD01}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{433A2D3A-4A90-4AE3-BB5E-B8D0E2869326}] => (Allow) C:\Windows\SysWOW64\lxbxcoms.exe
FirewallRules: [{148444D9-5385-41A1-B98E-EEBCF3979620}] => (Allow) C:\Windows\SysWOW64\lxbxcoms.exe
FirewallRules: [{87A23571-D2B1-47D0-8F90-4350FFED8F43}] => (Allow) C:\Windows\System32\lxbxcoms.exe
FirewallRules: [{B498AAF3-D607-4637-AB07-7F449C49FEAC}] => (Allow) C:\Windows\System32\lxbxcoms.exe
FirewallRules: [{61A808BD-2D1A-4370-BFAE-26D02F87B20C}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxbxpswx.exe
FirewallRules: [{7B076B7E-6C41-4A80-BAAB-3DCD3C0DC879}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxbxpswx.exe
FirewallRules: [{867D18AE-EBA1-46F3-A898-8AA38CF27FCF}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS33F1\HPDiagnosticCoreUI.exe
FirewallRules: [{4E52A88B-6B18-4782-9853-7ED95CB6106E}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS33F1\HPDiagnosticCoreUI.exe
FirewallRules: [TCP Query User{EA554C2C-0FBB-489B-83A5-AF68B844F532}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Block) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{AC207646-0EC7-479E-AA32-802F98980224}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Block) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{BBC7E431-EAF9-4566-8680-1791B09FB066}C:\program files (x86)\logitech\vid hd\vid.exe] => (Allow) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [UDP Query User{A8B9621F-1640-4F6D-919D-1DC9AF3A9062}C:\program files (x86)\logitech\vid hd\vid.exe] => (Allow) C:\program files (x86)\logitech\vid hd\vid.exe
FirewallRules: [{39E44637-5E2A-46E8-8B61-570D06327C9F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CF3F84F3-D57F-40D4-877F-D1CB5FCAD1BB}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS6CC6\hppiw.exe
FirewallRules: [{CAE91CA0-213D-4028-B80D-1F0D83846858}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS6CC6\hppiw.exe
FirewallRules: [{EF6DD69F-5843-4B45-82AC-61905AECC23F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{9E9B2E4C-E0D6-4F86-A46A-8FC8F4575F7E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{4392008D-F6D0-4F01-A9BF-A94328CA83E1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{EBE4381C-B4AA-4CE8-8ECC-65B9CD62F286}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{0D117815-A0D4-48BF-A5DB-8146D2455B10}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{159D6EE4-53CE-4DFC-AA38-F9DEC63E6749}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0EE1E4B8-3B50-44B6-9B9E-5AEADC420A82}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{44CD4EE0-0E77-479B-9404-DB786C31EC6D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{59C543D8-9C46-4A24-B9F3-2C8A7141632E}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS4782\HPDiagnosticCoreUI.exe
FirewallRules: [{A89FBAA5-9B4A-41E7-ADCD-19939B879325}] => (Allow) C:\Users\Hodorowski\AppData\Local\Temp\7zS4782\HPDiagnosticCoreUI.exe
FirewallRules: [{FD9EDD88-AD77-4DE0-8DAF-CD89A9ABB33B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{9CE07A80-0B9D-46AE-BF57-F602CDBB69DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{0CC2BFD2-A0F1-41E9-B731-F4D1991BFB1A}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAFB70A5-B24D-4A1C-B226-0897CBAE0185}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{5FF52FBD-61E3-4AC5-879D-0D546C4F14C9}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{D4BBE048-5E02-4877-8743-33F7B8765AA1}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{D1F0EADE-B633-44E8-9F77-50EC31E9A6C8}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [UDP Query User{76DFF17C-1AF5-470E-81A6-230AC7885F87}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [{20EAA21F-9D72-488F-B1A1-8C0760E624EE}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{4CDBB983-555D-45C9-9BA4-ABEAA8F4F68B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{FB1C9335-46AD-4210-BC35-FC5E5605E1A0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{E8485AC5-EC0B-4359-8C35-0D892ADF1841}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{727F3F29-3D1A-42D6-8C20-BFF87D9AA5E0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{FC9AD56C-CA18-4971-A063-44AAB11A3E1E}] => (Allow) LPort=2869
FirewallRules: [{E533EC9E-F1FC-45A8-AA1D-833F845D6872}] => (Allow) LPort=1900
FirewallRules: [{A4A77A30-A7C5-4AC8-980E-816F9CB250CD}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{3BB50CBC-C69E-48DA-8FC7-C110279D0AE2}C:\programdata\battle.net\agent\agent.3526\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3526\agent.exe
FirewallRules: [UDP Query User{BF3246BB-B08A-42AC-9C3D-008B58B30D81}C:\programdata\battle.net\agent\agent.3526\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3526\agent.exe
FirewallRules: [{873CB37B-D69B-4D18-A808-07517DC387BA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8C413F60-D9E1-41EE-ACE4-2D0CD659CD4C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{825EC9EC-8DF7-40DF-8699-1C12F909AE4B}C:\program files\verizon cloud\verizon cloud service.exe] => (Allow) C:\program files\verizon cloud\verizon cloud service.exe
FirewallRules: [UDP Query User{F6FA3957-4E78-4A02-A8F4-4A843C3CFE01}C:\program files\verizon cloud\verizon cloud service.exe] => (Allow) C:\program files\verizon cloud\verizon cloud service.exe
FirewallRules: [{081E97F8-CD43-4354-B0FE-46E392B443D4}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe
FirewallRules: [{78044956-2CC2-4B42-A2DD-CA12DF83081A}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{3CD7B771-CD91-4BF6-9E07-6973E27A0A3D}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{216EF4BD-7F70-49B4-8730-7285C41D19DF}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{E6D0E7F1-BD7B-4E72-91BE-756EDAC055E5}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{B9940C34-24D9-4CF4-9160-398F18ABAFBE}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{21F5A5BD-2BAE-42CB-A505-511B0A5F41AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{0D470A27-777C-4D32-B361-7FDEF7379A36}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [TCP Query User{206F4AA3-7D38-4131-BEE2-947B1CD5B4EC}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{3B7DD03D-79AB-4A66-ACFE-57E1E5B4DE5E}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{5DEE53C5-322C-4962-96A3-1F5675607DA1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FA4D45A9-FCE4-42A5-9AEB-FCAF6003B77F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9F1B5480-033B-4DA0-97A1-7B027AA22BBC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{51C2AE87-CD24-49A8-A762-80A2F39791CD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3C59320B-4BFE-4409-A3C4-F3182C6C4D58}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{0A4F1FD3-BCD6-4E63-A21A-AA81C128D77C}] => (Allow) C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{04A2753E-F86B-4B9C-AF39-0CEB664D73CE}] => (Allow) C:\Users\Hodorowski\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{97A8D693-7B07-4679-A58D-E61C5CC862B9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: Officejet 6500 E709a
Description: Officejet 6500 E709a
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
-
June 17th, 2015, 10:44 PM
#6
Application errors:
==================
Error: (06/16/2015 08:43:52 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (06/14/2015 04:47:24 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (06/12/2015 04:58:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2015 03:04:05 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (06/11/2015 11:15:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/10/2015 02:46:33 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.
Context: Application, SystemIndex Catalog
Error: (06/07/2015 04:38:19 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.
Error: (06/06/2015 03:22:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/05/2015 11:43:21 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.
Error: (06/05/2015 00:17:09 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.
System errors:
=============
Error: (06/17/2015 06:12:53 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:50 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:47 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:44 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:41 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:37 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 06:12:34 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 05:12:28 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 05:12:25 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Error: (06/17/2015 05:12:22 PM) (Source: Disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk1\DR1, has a bad block.
Microsoft Office:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-06-27 20:39:51.979
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:51.883
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:51.784
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6000.16386_none_6d564c64c358b59e\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:50.253
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:50.158
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:50.058
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.0.6000.16386_none_32a3e3ecf533e7fe\fveapi.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:41.019
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb\bcrypt.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:40.922
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb\bcrypt.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:40.822
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb\bcrypt.dll because the set of per-page image hashes could not be found on the system.
Date: 2013-06-27 20:39:15.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6000.16386_none_ec55d170f27a97bb_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
Percentage of memory in use: 66%
Total physical RAM: 4008.63 MB
Available physical RAM: 1336.94 MB
Total Pagefile: 8015.46 MB
Available Pagefile: 5141.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OSDisk) (Fixed) (Total:917.84 GB) (Free:817.08 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Recovery) (Fixed) (Total:13.67 GB) (Free:7.26 GB) NTFS
Drive e: (Jun 10 2015) (CDROM) (Total:4.37 GB) (Free:4.37 GB) UDF
Drive f: (OS) (Fixed) (Total:296.05 GB) (Free:181.22 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (RECOVERY) (Fixed) (Total:2 GB) (Free:1.39 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0C7B4B50)
Partition 1: (Active) - (Size=917.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=13.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 10000000)
Partition 1: (Not Active) - (Size=44 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=2 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=296 GB) - (Type=07 NTFS)
==================== End of log ============================
-
June 18th, 2015, 08:08 PM
#7
Please, observe following rules:
- Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
- If you're stuck, or you're not sure about certain step, always ask before doing anything else.
- Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
- Never run more than one scan at a time.
- Keep updating me regarding your computer behavior, good, or bad.
- The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
- If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
- I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
=========================
 Did you disable system restore for whatever reason?
Download RogueKiller from one of the following links and save it to your Desktop:
Link 1
Link 2
- Close all the running programs
- Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
- Otherwise just double-click on RogueKiller.exe
- Pre-scan will start. Let it finish.
- Click on SCAN button.
- Wait until the Status box shows Scan Finished
- Click on Delete.
- Wait until the Status box shows Deleting Finished.
- Click on Report and copy/paste the content of the Notepad into your next reply.
- RKreport.txt could also be found on your desktop.
- If more than one log is produced post all logs.
- If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again
Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
NOTE. If you already have MBAM 2.0 installed scroll down.
- Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to the following:
- Launch Malwarebytes Anti-Malware
- A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
- Click Finish.
- On the Dashboard, click the 'Update Now >>' link
- After the update completes, click the 'Scan Now >>' button.
- Or, on the Dashboard, click the Scan Now >> button.
- If an update is available, click the Update Now button.
- A Threat Scan will begin.
- When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
- In most cases, a restart will be required.
- Wait for the prompt to restart the computer to appear, then click on Yes.
If you already have MBAM 2.0 installed:
- On the Dashboard, click the 'Update Now >>' link
- After the update completes, click the 'Scan Now >>' button.
- Or, on the Dashboard, click the Scan Now >> button.
- If an update is available, click the Update Now button.
- A Threat Scan will begin.
- When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
- In most cases, a restart will be required.
- Wait for the prompt to restart the computer to appear, then click on Yes.
How to get logs:
(Export log to save as txt)
- After the restart once you are back at your desktop, open MBAM once more.
- Click on the History tab > Application Logs.
- Double click on the Scan Log which shows the Date and time of the scan just performed.
- Click 'Export'.
- Click 'Text file (*.txt)'
- In the Save File dialog box which appears, click on Desktop.
- In the File name: box type a name for your scan log.
- A message box named 'File Saved' should appear stating "Your file has been successfully exported".
- Click Ok
- Attach that saved log to your next reply.
(Copy to clipboard for pasting into forum replies or tickets)
- After the restart once you are back at your desktop, open MBAM once more.
- Click on the History tab > Application Logs.
- Double click on the Scan Log which shows the Date and time of the scan just performed.
- Click 'Copy to Clipboard'
- Paste the contents of the clipboard into your reply.
Please download AdwCleaner by Xplode onto your desktop.
- Close all open programs and internet browsers.
- Double click on adwcleaner.exe to run the tool.
- Click on Scan button.
- When the scan has finished click on Clean button.
- Your computer will be rebooted automatically. A text file will open after the restart.
- Please post the contents of that logfile with your next reply.
- You can find the logfile at C:\AdwCleaner[S1].txt as well.
Please download Junkware Removal Tool to your desktop.
- Shut down your protection software now to avoid potential conflicts.
- Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
- The tool will open and start scanning your system.
- Please be patient as this can take a while to complete depending on your system's specifications.
- On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
- Post the contents of JRT.txt into your next message.
-
June 19th, 2015, 04:07 PM
#8
Yes, I disabled system restore. As I said, I was in a state of delirium and I actually started following directions on a site to deal with the trojan and disabling system protection was the first step... then I realized I didn't know that site well enough to trust their processes (although they used Rkill and Adware that I remember). I wrote a note to turn it back on, but posted here with what little time I had. I've now reinstated it.
Here are the reports: 4 (Rkill, Malwarebytes, AdwCleaner, JRT)
RogueKiller V10.8.4.0 [Jun 15 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Hodorowski [Administrator]
Started from : C:\Users\Hodorowski\Desktop\RogueKiller.exe
Mode : Delete -- Date : 06/19/2015 10:58:36
¤¤¤ Processes : 0 ¤¤¤
¤¤¤ Registry : 2 ¤¤¤
[Hj.RegVal] (X64) HKEY_LOCAL_MACHINE\RK_Software_ON_G_A15A\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : cmd.exe /k start cmd.exe -> Replaced (explorer.exe)
[Hj.RegVal] (X86) HKEY_LOCAL_MACHINE\RK_Software_ON_G_A15A\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : cmd.exe /k start cmd.exe -> Replaced (explorer.exe)
¤¤¤ Tasks : 0 ¤¤¤
¤¤¤ Files : 0 ¤¤¤
¤¤¤ Hosts File : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost
¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: WDC WD10EALX-759BA1 ATA Device +++++
--- User ---
[MBR] 48f77dd8600389ccab5712c243a8fa29
[BSP] a5d523a6612c756561a0577e0ba9dbba : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 939867 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1924849664 | Size: 14000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
+++++ PhysicalDrive1: WDC WD3200AAKS-75VYA0 ATA Device +++++
--- User ---
[MBR] 3bdc3ba8d580fbdf1e8aa0fb4fcd0934
[BSP] 143500e28e0f7628a019343ed6099823 : HP MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 44 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 92160 | Size: 2048 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 4286464 | Size: 303151 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
+++++ PhysicalDrive2: Generic- Multi-Card USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )
============================================
RKreport_SCN_06192015_104834.log
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 6/19/2015
Scan Time: 11:01:18 AM
Logfile: mbam_log_6-19-15.txt
Administrator: Yes
Version: 2.01.6.1022
Malware Database: v2015.06.19.03
Rootkit Database: v2015.06.15.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Hodorowski
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 522805
Time Elapsed: 28 min, 40 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 4
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111271159}, Quarantined, [7916823a117939fd0ddeeca1b94c916f],
PUP.Optional.Spigot.A, HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5F8B03F0-96E8-41DB-8165-208DDA95E9D2}, Quarantined, [424dc8f4cebc3ff7c63153a48c77aa56],
PUP.Optional.ProPCCleaner.A, HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\SOFTWARE\Rainmaker Software Group LLC. \Pro PC Cleaner, Quarantined, [444ba31991f9e74f728697f5f70e837d],
PUP.Optional.Coupons.A, HKU\S-1-5-21-1650183741-4283284693-3914159089-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}, Quarantined, [98f709b36b1f290dde0e622732d3ad53],
Registry Values: 3
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111271159}|AppName, Lucky Savings-bg.exe, Quarantined, [7916823a117939fd0ddeeca1b94c916f]
PUP.Optional.Spigot.A, HKU\S-1-5-21-1650183741-4283284693-3914159089-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5F8B03F0-96E8-41DB-8165-208DDA95E9D2}|URL, https://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=926458&p={searchTerms}, Quarantined, [424dc8f4cebc3ff7c63153a48c77aa56]
PUP.Optional.Coupons.A, HKU\S-1-5-21-1650183741-4283284693-3914159089-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}|URL, http://search.coupons.com/search.asp?p=df&q={searchTerms}, Quarantined, [98f709b36b1f290dde0e622732d3ad53]
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)
Physical Sectors: 0
(No malicious items detected)
(end)
# AdwCleaner v4.206 - Logfile created 19/06/2015 at 12:25:36
# Updated 01/06/2015 by Xplode
# Database : 2015-06-17.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Hodorowski - DESKTOP
# Running from : C:\Users\Hodorowski\Desktop\AdwCleaner.exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Users\Alexis & Quinn\AppData\LocalLow\HPAppData
Folder Deleted : C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj
Folder Deleted : C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfmkllfplegemejikoabfpjdaoncphip
File Deleted : C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_bcfjehbfanfhgoehogmbiebedkidedjb_0
File Deleted : C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage
File Deleted : C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niloccemoadcdkdjlinkgdfekeahmflj_0.localstorage-journal
File Deleted : C:\Users\Lexi\AppData\Roaming\WBPU-TTL.DAT
File Deleted : C:\Users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\searchplugins\search.xml
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17840
-\\ Mozilla Firefox v38.0.5 (x86 en-US)
-\\ Google Chrome v43.0.2357.124
[C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\Hodorowski\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
*************************
AdwCleaner[R0].txt - [17392 bytes] - [04/02/2014 21:07:59]
AdwCleaner[R10].txt - [3093 bytes] - [19/02/2015 05:07:04]
AdwCleaner[R11].txt - [4950 bytes] - [01/04/2015 11:13:11]
AdwCleaner[R12].txt - [5164 bytes] - [01/05/2015 03:23:33]
AdwCleaner[R13].txt - [4495 bytes] - [05/05/2015 11:57:28]
AdwCleaner[R14].txt - [3848 bytes] - [19/06/2015 12:19:23]
AdwCleaner[R1].txt - [1738 bytes] - [07/02/2014 00:59:22]
AdwCleaner[R2].txt - [14042 bytes] - [14/06/2014 21:12:03]
AdwCleaner[R3].txt - [7508 bytes] - [16/08/2014 14:15:05]
AdwCleaner[R4].txt - [1832 bytes] - [17/08/2014 21:20:38]
AdwCleaner[R5].txt - [2502 bytes] - [25/08/2014 22:18:11]
AdwCleaner[R6].txt - [2400 bytes] - [04/09/2014 14:34:04]
AdwCleaner[R7].txt - [2768 bytes] - [01/11/2014 11:13:01]
AdwCleaner[R8].txt - [2604 bytes] - [04/11/2014 01:07:02]
AdwCleaner[R9].txt - [4703 bytes] - [10/01/2015 13:59:56]
AdwCleaner[S0].txt - [17498 bytes] - [04/02/2014 21:11:10]
AdwCleaner[S10].txt - [3054 bytes] - [19/02/2015 05:12:08]
AdwCleaner[S11].txt - [4918 bytes] - [01/04/2015 11:14:47]
AdwCleaner[S12].txt - [5201 bytes] - [01/05/2015 03:25:12]
AdwCleaner[S13].txt - [4590 bytes] - [05/05/2015 11:58:54]
AdwCleaner[S14].txt - [3262 bytes] - [19/06/2015 12:25:36]
AdwCleaner[S1].txt - [1769 bytes] - [07/02/2014 01:09:57]
AdwCleaner[S2].txt - [13805 bytes] - [14/06/2014 21:13:19]
AdwCleaner[S3].txt - [7667 bytes] - [16/08/2014 14:17:01]
AdwCleaner[S4].txt - [1893 bytes] - [17/08/2014 21:23:20]
AdwCleaner[S5].txt - [3380 bytes] - [25/08/2014 22:21:12]
AdwCleaner[S6].txt - [2469 bytes] - [04/09/2014 14:35:06]
AdwCleaner[S7].txt - [2843 bytes] - [01/11/2014 11:16:24]
AdwCleaner[S8].txt - [2671 bytes] - [04/11/2014 01:08:10]
AdwCleaner[S9].txt - [4674 bytes] - [10/01/2015 14:01:36]
########## EOF - C:\AdwCleaner\AdwCleaner[S14].txt - [3854 bytes] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 7.0.2 (06.18.2015:1)
OS: Windows 7 Home Premium x64
Ran by Hodorowski on Fri 06/19/2015 at 12:32:51.20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\Users\Hodorowski\appdata\local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage
Successfully deleted: [File] C:\Users\Hodorowski\appdata\local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage-journal
~~~ Folders
~~~ Chrome
[C:\Users\Hodorowski\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Hodorowski\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Hodorowski\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Hodorowski\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
iigplimlmgilpobjilfbfeilnpiigpgl,
lbfehkoinhhcknnbdgnnmjhiladcgbol,
odpccdgkmiicgocepijnaeihjnjnomca
]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 06/19/2015 at 12:35:25.85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
June 19th, 2015, 05:25 PM
#9
Please download ComboFix from Here, Here or Here to your Desktop.
**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
- Never rename Combofix unless instructed.
- Close any open browsers.
- Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
- Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
- Close any open browsers.
- WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
- Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
- If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
If the connection is not there use restore point you created prior to running Combofix. - Double click on combofix.exe & follow the prompts.
- NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.
- When finished, it will produce a report for you.
- Please post the "C:\ComboFix.txt"
**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: http://www.appremover.com/
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.
Make sure, you re-enable your security programs, when you're done with Combofix.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTE.
If, for some reason, Combofix refuses to run, try the following...
Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Restart computer in safe mode
- Double-click on the Rkill desktop icon to run the tool.
- If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
- A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
- If not, delete the file, then download and use the one provided in Link 2.
- Do not reboot until instructed.
- If the tool does not run from any of the links provided, please let me know.
When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.
Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.
IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
-
June 23rd, 2015, 12:59 AM
#10
ComboFix 15-06-23.01 - Hodorowski 06/22/2015 22:26:04.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4009.2500 [GMT -6:00]
Running from: c:\users\Hodorowski\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\programdata.\documents\settings
c:\programdata\SPL8DB9.tmp
c:\programdata\SPLF2C1.tmp
c:\programdata\SPLF9.tmp
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\nplastpass.dll
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp\nplastpass64.dll
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1093207832\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp1419209256\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\he_IL\messages.mo
-
June 23rd, 2015, 12:59 AM
#11
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp221757145\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp26240853\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp262472237\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\af_ZA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp415121690\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\af_ZA\af_ZA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\af_ZA\lastpass.mo
-
June 23rd, 2015, 01:00 AM
#12
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ar_EG\ar_EG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ar_EG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ar_SA\ar_SA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ar_SA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\az_AZ\az_AZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\az_AZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\be_BY\be_BY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\be_BY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bg_BG\bg_BG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bg_BG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bn_BD\bn_BD.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bn_BD\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bs_BA\bs_BA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\bs_BA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ca_ES\ca_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ca_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\cs_CZ\cs_CZ.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\cs_CZ\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\da_DK\da_DK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\da_DK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\de_DE\de_DE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\de_DE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\de_DE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\de_DE\wxstd.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\el_GR\el_GR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\el_GR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_AU\en_AU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_AU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_GB\en_GB.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_GB\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_US\en_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\en_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\eo_US\eo_US.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\eo_US\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\es_ES\es_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\es_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\es_MX\es_MX.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\es_MX\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\et_EE\et_EE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\et_EE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fa_IR\fa_IR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fa_IR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fa_IR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fi_FI\fi_FI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fi_FI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fo_FO\fo_FO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fo_FO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fr_CA\fr_CA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fr_CA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fr_FR\fr_FR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fr_FR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\fr_FR\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ga_IE\ga_IE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ga_IE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\gl_ES\gl_ES.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\gl_ES\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\gu_IN\gu_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\gu_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\he_IL\he_IL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\he_IL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\he_IL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hi_IN\hi_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hi_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hr_HR\hr_HR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hr_HR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hu_HU\hu_HU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\hu_HU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\id_ID\id_ID.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\id_ID\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\is_IS\is_IS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\is_IS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\it_IT\it_IT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\it_IT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ja_JP\ja_JP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ja_JP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ka_GE\ka_GE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ka_GE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\kn_IN\kn_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\kn_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ko_KR\ko_KR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ko_KR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\lt_LT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\lt_LT\lt_LT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\lv_LV\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\lv_LV\lv_LV.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mg_MG\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mg_MG\mg_MG.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mk_MK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mk_MK\mk_MK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ml_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ml_IN\ml_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mr_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\mr_IN\mr_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ms_MY\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ms_MY\ms_MY.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nb_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nb_NO\nb_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ne_NP\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ne_NP\ne_NP.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nl_NL\junk.html
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nl_NL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nl_NL\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nl_NL\nl_NL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nn_NO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\nn_NO\nn_NO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pa_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pa_IN\pa_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pl_PL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pl_PL\pl_PL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pt_BR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pt_BR\pt_BR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pt_PT\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\pt_PT\pt_PT.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ro_RO\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ro_RO\ro_RO.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ru_RU\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ru_RU\ru_RU.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\si_LK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\si_LK\si_LK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sk_SK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sk_SK\sk_SK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sl_SI\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sl_SI\sl_SI.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sq_AL\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sq_AL\sq_AL.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sr_RS\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sr_RS\sr_RS.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sv_SE\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sv_SE\messages.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\sv_SE\sv_SE.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ta_IN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ta_IN\ta_IN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\th_TH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\th_TH\th_TH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\tl_PH\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\tl_PH\tl_PH.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\tr_TR\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\tr_TR\tr_TR.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\uk_UA\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\uk_UA\uk_UA.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ur_PK\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\ur_PK\ur_PK.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\vi_VN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\vi_VN\vi_VN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\zh_CN\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\zh_CN\zh_CN.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\zh_TW\lastpass.mo
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\languages\zh_TW\zh_TW.xpm
c:\users\Hodorowski\AppData\Roaming\Local\Temp\lptmp822279436\lp_languages.zip
c:\users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\searchplugins\search.xml
c:\users\Lexi\AppData\Roaming\Local
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\af_ZA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\af_ZA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\ar_EG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ar_EG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\ar_SA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ar_SA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\az_AZ.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\az_AZ\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\be_BY.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\be_BY\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\bg_BG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bg_BG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\bn_BD.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bn_BD\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\bs_BA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\bs_BA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\ca_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ca_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\cs_CZ.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\cs_CZ\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\da_DK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\da_DK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\de_DE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\de_DE\wxstd.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\el_GR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\el_GR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\en_AU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_AU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\en_GB.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_GB\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_US\en_US.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\en_US\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\eo_US.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\eo_US\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\es_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\es_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\es_MX.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\es_MX\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\et_EE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\et_EE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\fa_IR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fa_IR\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\fi_FI.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fi_FI\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\fo_FO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fo_FO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\fr_CA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fr_CA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\fr_FR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\fr_FR\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\ga_IE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ga_IE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\gl_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\gl_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\gu_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\gu_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\he_IL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\he_IL\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\hi_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hi_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\hr_HR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hr_HR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\hu_HU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\hu_HU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\id_ID.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\id_ID\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\is_IS.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\is_IS\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\it_IT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\it_IT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\ja_JP.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ja_JP\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\ka_GE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ka_GE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\kn_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\kn_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\ko_KR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ko_KR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\lt_LT\lt_LT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\lv_LV\lv_LV.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mg_MG\mg_MG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mk_MK\mk_MK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ml_IN\ml_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\mr_IN\mr_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ms_MY\ms_MY.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nb_NO\nb_NO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ne_NP\ne_NP.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\junk.html
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nl_NL\nl_NL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\nn_NO\nn_NO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pa_IN\pa_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pl_PL\pl_PL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pt_BR\pt_BR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\pt_PT\pt_PT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ro_RO\ro_RO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ru_RU\ru_RU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\si_LK\si_LK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sk_SK\sk_SK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sl_SI\sl_SI.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sq_AL\sq_AL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sr_RS\sr_RS.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\sv_SE\sv_SE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ta_IN\ta_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\th_TH\th_TH.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\tl_PH\tl_PH.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\tr_TR\tr_TR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\uk_UA\uk_UA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\ur_PK\ur_PK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\vi_VN\vi_VN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\zh_CN\zh_CN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\languages\zh_TW\zh_TW.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp\lp_languages.zip
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\af_ZA\af_ZA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\af_ZA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ar_EG\ar_EG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ar_EG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ar_SA\ar_SA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ar_SA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\az_AZ\az_AZ.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\az_AZ\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\be_BY\be_BY.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\be_BY\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bg_BG\bg_BG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bg_BG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bn_BD\bn_BD.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bn_BD\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bs_BA\bs_BA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\bs_BA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ca_ES\ca_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ca_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\cs_CZ\cs_CZ.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\cs_CZ\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\da_DK\da_DK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\da_DK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\de_DE\de_DE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\de_DE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\de_DE\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\de_DE\wxstd.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\el_GR\el_GR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\el_GR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_AU\en_AU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_AU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_GB\en_GB.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_GB\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_US\en_US.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\en_US\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\eo_US\eo_US.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\eo_US\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\es_ES\es_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\es_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\es_MX\es_MX.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\es_MX\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\et_EE\et_EE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\et_EE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fa_IR\fa_IR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fa_IR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fa_IR\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fi_FI\fi_FI.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fi_FI\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fo_FO\fo_FO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fo_FO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fr_CA\fr_CA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fr_CA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fr_FR\fr_FR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fr_FR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\fr_FR\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ga_IE\ga_IE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ga_IE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\gl_ES\gl_ES.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\gl_ES\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\gu_IN\gu_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\gu_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\he_IL\he_IL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\he_IL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\he_IL\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hi_IN\hi_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hi_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hr_HR\hr_HR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hr_HR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hu_HU\hu_HU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\hu_HU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\id_ID\id_ID.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\id_ID\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\is_IS\is_IS.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\is_IS\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\it_IT\it_IT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\it_IT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ja_JP\ja_JP.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ja_JP\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ka_GE\ka_GE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ka_GE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\kn_IN\kn_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\kn_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ko_KR\ko_KR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ko_KR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\lt_LT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\lt_LT\lt_LT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\lv_LV\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\lv_LV\lv_LV.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mg_MG\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mg_MG\mg_MG.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mk_MK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mk_MK\mk_MK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ml_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ml_IN\ml_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mr_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\mr_IN\mr_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ms_MY\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ms_MY\ms_MY.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nb_NO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nb_NO\nb_NO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ne_NP\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ne_NP\ne_NP.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nl_NL\junk.html
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nl_NL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nl_NL\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nl_NL\nl_NL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nn_NO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\nn_NO\nn_NO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pa_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pa_IN\pa_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pl_PL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pl_PL\pl_PL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pt_BR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pt_BR\pt_BR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pt_PT\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\pt_PT\pt_PT.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ro_RO\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ro_RO\ro_RO.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ru_RU\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ru_RU\ru_RU.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\si_LK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\si_LK\si_LK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sk_SK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sk_SK\sk_SK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sl_SI\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sl_SI\sl_SI.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sq_AL\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sq_AL\sq_AL.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sr_RS\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sr_RS\sr_RS.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sv_SE\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sv_SE\messages.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\sv_SE\sv_SE.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ta_IN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ta_IN\ta_IN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\th_TH\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\th_TH\th_TH.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\tl_PH\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\tl_PH\tl_PH.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\tr_TR\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\tr_TR\tr_TR.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\uk_UA\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\uk_UA\uk_UA.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ur_PK\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\ur_PK\ur_PK.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\vi_VN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\vi_VN\vi_VN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\zh_CN\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\zh_CN\zh_CN.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\zh_TW\lastpass.mo
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\languages\zh_TW\zh_TW.xpm
c:\users\Lexi\AppData\Roaming\Local\Temp\lptmp1587629407\lp_languages.zip
.
.
((((((((((((((((((((((((( Files Created from 2015-05-23 to 2015-06-23 )))))))))))))))))))))))))))))))
.
.
2015-06-23 04:33 . 2015-06-23 04:33 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-06-23 04:33 . 2015-06-23 04:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-06-23 04:33 . 2015-06-23 04:33 -------- d-----w- c:\users\Alexis & Quinn\AppData\Local\temp
2015-06-22 18:40 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C8806F1B-B7C3-4610-BDFC-CB033AAF8695}\mpengine.dll
2015-06-21 18:38 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-06-21 04:13 . 2015-06-21 04:13 -------- d-----w- c:\users\Lexi\AppData\Local\GWX
2015-06-19 16:42 . 2015-06-19 16:42 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-06-19 16:42 . 2015-06-19 17:00 -------- d-----w- c:\programdata\RogueKiller
2015-06-18 00:27 . 2015-06-18 00:29 -------- d-----w- C:\FRST
2015-06-17 11:10 . 2015-03-26 02:46 1187344 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C0863D89-A184-407F-B948-75EB2A5422EC}\gapaengine.dll
2015-06-11 18:00 . 2015-04-24 18:17 633856 ----a-w- c:\windows\system32\comctl32.dll
2015-06-11 17:59 . 2015-05-23 03:15 62464 ----a-w- c:\windows\SysWow64\iesetup.dll
2015-06-10 06:33 . 2015-06-10 06:33 -------- d-----w- c:\users\Hodorowski\AppData\Local\PassMark
2015-06-10 06:33 . 2008-07-12 14:18 540688 ----a-w- c:\windows\system32\d3dx10_39.dll
2015-06-10 06:33 . 2008-07-12 14:18 1942552 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2015-06-10 06:33 . 2008-07-12 14:18 4992520 ----a-w- c:\windows\system32\D3DX9_39.dll
2015-06-10 06:33 . 2006-09-28 22:05 3977496 ----a-w- c:\windows\system32\d3dx9_31.dll
2015-06-10 06:33 . 2015-06-10 06:33 -------- d-----w- c:\programdata\Passmark
2015-06-10 06:33 . 2015-06-10 06:33 -------- d-----w- c:\program files\PerformanceTest
2015-06-05 16:59 . 2015-05-22 18:18 700416 ----a-w- c:\windows\system32\generaltel.dll
2015-06-05 16:59 . 2015-05-22 18:18 757248 ----a-w- c:\windows\system32\invagent.dll
2015-06-05 16:59 . 2015-05-22 18:18 423424 ----a-w- c:\windows\system32\devinv.dll
2015-06-05 16:59 . 2015-05-22 18:18 1021440 ----a-w- c:\windows\system32\appraiser.dll
2015-06-05 16:59 . 2015-05-22 18:18 45568 ----a-w- c:\windows\system32\acmigration.dll
2015-06-05 16:59 . 2015-05-22 18:13 1119232 ----a-w- c:\windows\system32\aeinv.dll
2015-06-05 16:59 . 2015-05-21 13:19 193536 ----a-w- c:\windows\system32\aepic.dll
2015-06-05 16:59 . 2015-05-22 18:18 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-06-05 03:14 . 2015-06-05 03:14 -------- d-----w- c:\users\Alexis & Quinn\AppData\Local\GWX
2015-06-04 16:51 . 2015-06-04 16:51 -------- d-----w- c:\users\Hodorowski\AppData\Local\GWX
2015-05-26 16:36 . 2015-06-16 12:40 -------- d-----r- c:\users\Hodorowski\Dropbox
2015-05-26 16:32 . 2015-06-16 12:39 -------- d-----w- c:\users\Hodorowski\AppData\Roaming\Dropbox
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-06-19 18:17 . 2014-06-30 03:21 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-06-12 09:06 . 2011-11-06 22:46 140135120 ----a-w- c:\windows\system32\MRT.exe
2015-06-09 22:18 . 2013-01-06 03:59 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-06-09 22:18 . 2011-11-06 22:04 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-05-25 18:01 . 2015-06-11 18:01 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-05-01 13:17 . 2015-05-13 09:05 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 13:16 . 2015-05-13 09:05 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-04-20 03:17 . 2015-05-13 03:13 1647104 ----a-w- c:\windows\system32\DWrite.dll
2015-04-20 03:17 . 2015-05-13 03:13 1179136 ----a-w- c:\windows\system32\FntCache.dll
2015-04-20 02:56 . 2015-05-13 03:13 1250816 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-04-18 03:10 . 2015-05-13 03:15 460800 ----a-w- c:\windows\system32\certcli.dll
2015-04-18 02:56 . 2015-05-13 03:15 342016 ----a-w- c:\windows\SysWow64\certcli.dll
2015-04-14 15:37 . 2014-06-30 03:21 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-14 15:37 . 2014-06-30 03:21 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-14 15:37 . 2014-01-18 03:59 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-14 09:38 . 2015-04-14 09:38 1217192 ----a-w- c:\windows\SysWow64\FM20.DLL
2015-04-13 03:28 . 2015-05-13 03:14 328704 ----a-w- c:\windows\system32\services.exe
2015-04-08 03:29 . 2015-05-13 03:13 275456 ----a-w- c:\windows\system32\InkEd.dll
2015-04-08 03:29 . 2015-05-13 03:13 24576 ----a-w- c:\windows\system32\jnwmon.dll
2015-04-08 03:14 . 2015-05-13 03:13 216064 ----a-w- c:\windows\SysWow64\InkEd.dll
2015-04-03 04:40 . 2015-04-03 04:40 538 ----a-w- c:\windows\uninstallstickies.bat
2015-03-26 02:46 . 2012-02-10 10:28 1187344 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2015-02-14 11:26 . 2015-02-14 11:26 14190648 ----a-w- c:\program files (x86)\Common Files\lpuninstall.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 151576 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"MS Shell Services"="c:\program files (x86)\KidLogger\Kidlogger.exe" [2015-02-19 763568]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Backblaze"="c:\program files (x86)\Backblaze\bzbui.exe" [2015-05-18 490176]
.
c:\users\Hodorowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
EvernoteClipper.lnk - c:\program files (x86)\Evernote\Evernote\EvernoteClipper.exe [2015-1-29 1115144]
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
Stickies.lnk - c:\program files (x86)\Stickies\stickies.exe [2015-4-2 1553408]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2010-5-28 276328]
QuickBooks_Standard_21.lnk - c:\program files (x86)\Intuit\QuickBooks 2013\QBW32.EXE -silent [2014-1-16 1185096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe;c:\program files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys;c:\windows\SYSNATIVE\DRIVERS\motfilt.sys [x]
R3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys;c:\windows\SYSNATIVE\DRIVERS\lvbflt64.sys [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C615(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 MHIKEY10;MHIKEY10;c:\windows\system32\Drivers\MHIKEY10x64.sys;c:\windows\SYSNATIVE\Drivers\MHIKEY10x64.sys [x]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys;c:\windows\SYSNATIVE\DRIVERS\motccgp.sys [x]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys;c:\windows\SYSNATIVE\DRIVERS\motccgpfl.sys [x]
R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys;c:\windows\SYSNATIVE\DRIVERS\Motousbnet.sys [x]
R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys;c:\windows\SYSNATIVE\DRIVERS\motusbdevice.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
-
June 23rd, 2015, 01:01 AM
#13
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 PCDSRVC{67F2314B-25F2B3C0-06020101}_0;PCDSRVC{67F2314B-25F2B3C0-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\gencotst\pcdsrvc_x64.pkms;c:\gencotst\pcdsrvc_x64.pkms [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
R3 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
R3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [x]
R4 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [x]
R4 QBVSS;QBIDPService;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [x]
R4 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R4 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 bzserv;Backblaze Service;c:\program files (x86)\Backblaze\bzserv.exe;c:\program files (x86)\Backblaze\bzserv.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-06-22 19:37 990024 ----a-w- c:\program files (x86)\Google\Chrome\Application\43.0.2357.130\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-06 22:18]
.
2015-06-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005Core.job
- c:\users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-04 03:40]
.
2015-06-23 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1650183741-4283284693-3914159089-1005UA.job
- c:\users\Alexis & Quinn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-03-04 03:40]
.
2015-06-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-08 21:14]
.
2015-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-08 21:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-05-05 03:08 184856 ----a-w- c:\users\Hodorowski\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Clip bookmark - c:\program files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
IE: Clip image - c:\program files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
IE: Clip selection - c:\program files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
IE: Clip this page - c:\program files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
IE: Clip URL - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
IE: LastPass - file://c:\users\Hodorowski\AppData\LocalLow\LastPass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\users\Hodorowski\AppData\LocalLow\LastPass\context.html?cmd=fillforms
IE: New note - c:\program files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
TCP: DhcpNameServer = 192.168.0.1 205.171.3.25
Handler: intu-help-qb6 - {6898B29B-BF49-43cb-A0B1-D0B9496AF491} - c:\program files (x86)\Intuit\QuickBooks 2013\HelpAsyncPluggableProtocol.dll
FF - ProfilePath - c:\users\Hodorowski\AppData\Roaming\Mozilla\Firefox\Profiles\uppyzh4i.default-1409864959925\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
.
- - - - ORPHANS REMOVED - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{67F2314B-25F2B3C0-06020101}_0]
"ImagePath"="\??\c:\gencotst\pcdsrvc_x64.pkms"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-06-22 22:35:13
ComboFix-quarantined-files.txt 2015-06-23 04:35
.
Pre-Run: 874,110,447,616 bytes free
Post-Run: 874,076,188,672 bytes free
.
- - End Of File - - 811711B21C4D27173A0A73323C1DAAF5
5C616939100B85E558DA92B899A0FC36
-
June 23rd, 2015, 07:25 PM
#14
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.
- Double-click to run it. When the tool opens click Yes to disclaimer.
- Make sure you checkmark Addition.txt box.
- Press Scan button.
- Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
-
June 24th, 2015, 02:03 AM
#15
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Hodorowski (administrator) on DESKTOP on 23-06-2015 23:19:10
Running from C:\Users\Hodorowski\Desktop
Loaded Profiles: Hodorowski & Lexi (Available Profiles: Hodorowski & Alexis & Quinn & Lexi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
() C:\Program Files (x86)\Backblaze\bzserv.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Tesline-service) C:\Program Files (x86)\KidLogger\Kidlogger.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dinotify.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [MS Shell Services] => C:\Program Files (x86)\KidLogger\Kidlogger.exe [763568 2015-02-19] (Tesline-service)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\VirtualOWSSuppHost.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Media Player\WMPDMC.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup\hpznui40.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\Roxio Central 5\RoxioCentralFx.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\ehome\mcspad.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Datalode\Encore\Hoyle Puzzle Games 2010\encore_reg.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Motorola Mobility\DeviceSoftwareUpdate\DeviceUpdate.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\Statement Writer 2013\ISWExtract.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\EOS Utility\WFTPairing\WFT FirewallSettings.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\ehome\wow\ehexthost32.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\TurboTax\Home & Business 2013\32bit\TurboTax.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Secunia\PSI\SUA\91fa336b2ac29ef07c32e849a032f313045e2d19\AdobeFlashPlayer_17.0.0.188_NPAPI_SPS.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Live\Installer\wlstartup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\AudioCore\DVDMusicAssistant12OEM.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\upgradedb.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Mail\WinMail.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\MGTEK\Error Reporting\holmes.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup\hpzscr40.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\RRLauncher.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\SketchUp\SketchUp 2013\SketchUp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\Digital Photo Professional\DPPTrimmer.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\Statement Writer 2013\vstor30sp1-KB949258-x86.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Speccy\Speccy.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Media Player\wmprph.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Motorola Shared\Mobile Drivers\Drivers\usblan_ifconfig.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Bullzip\PDF Printer\xpdf\bin\pdftops.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\2nd Story Software\TaxACT 2012\Unta12.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpzswp01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft IntelliType Pro\itype.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Windows Live\.cache\421581171ce1f9207\DXSETUP.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Eula.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\TaskScheduler.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\jqs.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Roxio Shared\OEM\RoxioSharedAPI\ShareLauncher12OEM.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncMapiInterfaceHelper_x64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Media Player\Setup_wm.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\QBHelp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\java-rmi.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWizardLauncher12OEM.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Photo Viewer\ImagingDevices.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Panda USB Vaccine\unins000.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\AutoBackupEXE.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Security Client\MpCmdRun.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Outlook.client.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Hearts\hearts.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Canon\UIW\1.10.0.0\Uninst.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Backblaze\bztrans_thread03.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\LogiShrd\DriverStore\LMkRstPt.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Minesweeper\minesweeper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Silverlight\5.1.40416.0\Silverlight.Configuration.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Security Client\msseces.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Logitech\LWS\LU\LuInstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ACECNFLT.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{2E1B4B42-069F-4F53-9966-9B9B938D7FE5}\TestPage.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Hoyle Puzzle Games.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBWebConnector\QBWebConnector.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows NT\Accessories\wordpad.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Sonic Shared\PX Drivers\drvins64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup\hpznop01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HD Tune\unins000.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Hearts\hearts.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\QBCSB2.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\Setup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\LogiShrd\SharedBin\LWS_Uninstaller.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\TurboTax\Home & Business 2013\32bit\DeleteTempPrintFiles.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\KidLogger\Kidlogger.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Media Player\wmpnscfg.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\VirtualSearchProtocolHost.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\More Games\MoreGames.dll <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\SETLANG.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Secunia\PSI\SUA\f2231c88705aaaf267443a8e6ac62ca5b6806acc\QuickTime_7.7.6_SPS.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Intuit\Sync\Sybase10\dbmlsync.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Safari.client.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpzmsi01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office12\MSOHTMED.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\More Games\MoreGames.dll <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Mail\wab.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\LastPass\nplastpass.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32Info.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\promo.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup\hpzfwx01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\ehome\ehvid.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\javaw.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Speccy\uninst.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Logitech\LWS\LU\LogitechUpdate.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\Install\{3C854F78-FD51-4F33-963C-A017361C82FA}\41.0.2272.89_40.0.2214.115_chrome_updater.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\PerformanceTest\pt.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\QuickTime\QTSystem\ExportController.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\PerformanceTest\unins000.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\lpuninstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\ehome\mcupdate.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft IntelliType Pro\dpgupdateinstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Internet Explorer <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\policytool.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\PhotoShowExpress\RoxioExport.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Big Bang NovaSweeper\Big Bang NovaSweeper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\EOS Utility\WFTPairing\WFTPairing.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Evernote\Evernote\ENScript.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Backblaze\bzserv.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\servertool.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Bullzip\PDF Printer\gs\gswin32c.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\PerformanceTest\DXSETUP.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Evernote\Evernote\Evernote.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\QBDBMgrN.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Media Player\wmpsideshowgadget.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\dbconverter.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\KidLogger\voice.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\VirtualOWSSuppManager.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Sidebar <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\dot4wrap\dot4_plugin.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\2nd Story Software\TaxACT 2012\TaxACT12.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\windows.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\misc.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\protocolhandler.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Hewlett-Packard\Scanjet\bin\hpsjrreg.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Big Bang Sudoku\Data\lib\UnityDomainLoad.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\2nd Story Software\TaxACT 2012\Unstate.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOICONS.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\Mingler.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleUpdateSetup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\ZoomBrowser.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\support.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\SpiderSolitaire\spidersolitaire.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleUpdateWebPlugin.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Backblaze\bztrans_thread05.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\devicemanagement\hpzmsi01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft IntelliPoint\DPLaunch.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\MUExe\7.1.361.0\BingBarSetup-Partner.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\LastPass\lastpass.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Minesweeper\minesweeper.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Bullzip\PDF Printer\Debug\BugRadar.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\PhotoStitch\STViewer.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Avery\Avery Wizard 5.0\AZWizard.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtbx01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\PhotoStitch\STLauncher.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Windows Media Player\wmpnetwk.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Windows Live\.cache\226eb4f21ce1f9202\DXSETUP.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\coregen.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Solitaire\solitaire.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\Components\Support\RemoteAssist.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\CyberLink\PowerDVD9\CLDrvChk.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Backblaze\bzdoinstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\Chess\chess.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Logitech\LWS\LogiShrd\lws\LU2.0\LuInstall.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Apple Application Support\YSLoader.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\Installer\chrmstp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\Install\{2B631989-BF84-4468-88A2-2988B09F12C9}\42.0.2311.135_42.0.2311.90_chrome_updater.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\esupport\hpzmsi01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office12\INFOPATH.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Big Bang Remembrance\Big Bang Remembrance.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Intuit\Tools\netfx_setupverifier.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Stickies\stickies.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\stax.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Intuit\QB XL\QBXL64Connect.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\Retrieve 12\Launch_Retrieve.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Bullzip\PDF Printer\ppt\pdfpowertool.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\CCleaner\CCleaner64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSE7.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroExt\AcroExt.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Games\More Games\MoreGames.dll <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\HP Software Update\HPWUCli.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Temp\{58D79E62-CFC8-4331-8469-3A1B16E1769C}\setup\hpzrcv01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgt01.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleUpdateBroker.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqlgtidx.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\QuickBooks_Replay_Setup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\HelpViewer\hpqhvshm.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\LogiShrd\LogiWLMPluginMSI\LogiWLMController.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Options14\MSOO.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLED.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft Security Client\Setup.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Roxio\OEM\Roxio Central 5\RCDownloadConfig.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\OINFOP12.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Big Bang Reaction\Data\lib\UnityDomainLoad.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\CyberLink\PowerDVD9\PDVDLaunchPolicy.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncPlanObserver.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Microsoft IntelliType Pro\DPLaunch.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Java\jre7\bin\keytool.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\pipanel.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\PX Storage Engine\drvins64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Backblaze\bztrans_thread06.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Intuit\QuickBooks 2013\qbmapi64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrolEx.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\LogiShrd\SharedBin\LogiDPPApp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\LogiShrd\DriverStore\PRO564\WUApp64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGalleryRepair.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\ehome\ehmsas.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Live\Installer\wlsettings.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\HP\Digital Imaging\bin\hposvc08.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Logitech\LWS\Webcam Software\Launcher_Main.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Windows\Speech\Common\sapisvr.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files (x86)\Canon\Digital Photo Professional\DPPStamp.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software: C:\Program Files\Common Files\Apple\Apple Application Support\YSLoader.exe <====== ATTENTION
HKU\S-1-5-21-1650183741-4283284693-3914159089-1006 Group Policy restriction on software:
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote
